Setting up a SSL server that disconnects connections and executes commands

Question

I am looking for suggestions on how to setup a simple SSL server that listens on a port and when a device connects, tell the device to disconnect, and then executes a command

Context: The device is an Amazon dash and when it connects the message is encrypted, but I don't care about the message.

I will be running this on an openwrt router

I read about using netcat and openssl s_server, but I would like feed back and suggestions on the best way to implement this.

Here is my current solution using netcat:

while true; do
    netcat -vv -l -p 443 -c < /www/default.html
    curl -X POST http://maker.ifttt.com/trigger/button_pressed/with/key/<MY KEY>
    sleep 5

done

Any thoughts on this solution?

Answer 1

I found these instructions for setting up SSL server to fool the dash button.

https://mpetroff.net/2015/05/amazon-dash-button-teardown/

(Look under comment by Mark, posted on August 9, 2015 at 5:39 pm)

He used a webserver from https://gist.github.com/jonathantneal/774e4b0b3d4d739cbc53

Using the information above, I was able to write my own SSL server.

import BaseHTTPServer, SimpleHTTPServer, ssl

class MyHTTPHandler(SimpleHTTPServer.SimpleHTTPRequestHandler):
    def do_GET(s):
        print 'GET', s.path

    def do_POST(s):
        print 'POST', s.path

if __name__ == "__main__":
    # Create the server, binding to localhost on port 443
    httpd = BaseHTTPServer.HTTPServer(('', 443), MyHTTPHandler)
    httpd.socket = ssl.wrap_socket (httpd.socket, certfile='cert.pem', server_side=True)
    httpd.serve_forever()

and I get outputs like:

POST /2/b
POST /2/d
POST /2/d
POST /2/d

The above is all from a single press. However, it isn't more useful than a generic TCP server that just handle an incoming connection. As there is no difference between single press, double press and a long press.

(It is quite likely that you need to fool the dash button to trust your self-signed certificate. This is what I did)

$ openssl req -x509 -newkey rsa:2048 -out cert.pem -nodes -keyout cert.pem
Generating a 2048 bit RSA private key
.................................................+++
..................................................................................................................+++
writing new private key to 'cert.pem'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:US
State or Province Name (full name) [Some-State]:Washington
Locality Name (eg, city) []:Seattle
Organization Name (eg, company) [Internet Widgits Pty Ltd]:
Organizational Unit Name (eg, section) []:Amazon.com, Inc.
Common Name (e.g. server FQDN or YOUR name) []:parker-gateway-na.amazon.com
Email Address []: